Assign eligible role to management group #30332
Labels
Auto-Assign
Auto assign by bot
Azure CLI Team
The command of the issue is owned by Azure CLI team
customer-reported
Issues that are reported by GitHub users external to the Azure organization.
feature-request
RBAC
az role
Milestone
Related command
az role assignment create
Is your feature request related to a problem? Please describe.
In Azure Portal I am assigning roles to a Management Group. I want to create an Eligible role assignment (which is recommended) via Azure CLI. This is currently in preview in the Azure Portal and not available in the Azure CLI. I would like to create the eligible role via Azure CLI.
Describe the solution you'd like
I would like to be able to choose a Assignment type, Assignment duration, Start date and time and End date and time or expirationDuration (e.g. 1 year, ISO 8601 https://en.wikipedia.org/wiki/ISO_8601#Durations ) like in the Azure Portal.
Example:
az role assignment create --assignee "<Group GUID>" --role "Contributor" --scope "/providers/Microsoft.Management/managementGroups/<MANAGEMENT GROUP ID>" --assignment-type "Eligible" --assignment-duration "TimeBound" --expiration-duration "P1Y"
Describe alternatives you've considered
None
Additional context
Basically I want to be able to use the recommended assignment type, Eligible, via Azure CLI.
The text was updated successfully, but these errors were encountered: